AeroLeads people directory · profile

Melba Lopez Email & Phone Number

STSM - SW Supply Chain Security at IBM
Location: Austin, Texas, United States 13 work roles 3 schools
1 work email found @ibm.com 2 phones found area 305 and 650 LinkedIn matched
✓ Verified July 2026 4 data sources Profile completeness 100%

Contact Signals · 1 work email · 2 phones

Work email m****@ibm.com
Direct phone (305) ***-****
LinkedIn Profile matched
3 free lookups remaining · No credit card
Current company
IBM
Role
STSM - SW Supply Chain Security
Location
Austin, Texas, United States
Company size

Who is Melba Lopez? Overview

A concise factual answer block for searchers comparing this professional profile.

Quick answer

Melba Lopez is listed as STSM - SW Supply Chain Security at IBM, a with 332208 employees, based in Austin, Texas, United States. AeroLeads shows a work email signal at ibm.com, phone signal with area code 305, 650, and a matched LinkedIn profile for Melba Lopez.

Melba Lopez previously worked as SW Supply Chain Security Architect, STSM at Ibm and Co-Founder at Havana Banana Press L.L.C.. Melba Lopez holds Master Of Professional Studies In Information Sciences (Mps In Is), Cybersecurity And Information Assurance from Penn State University.

Company email context

Email format at IBM

This section adds company-level context without repeating Melba Lopez's masked contact details.

{first}.{last}@ibm.com
89% confidence

AeroLeads found 1 current-domain work email signal for Melba Lopez. Compare company email patterns before reaching out.

Profile bio

About Melba Lopez

Melba Lopez is a seasoned cybersecurity professional currently serving as a Senior Technical Staff Member (STSM) at the IBM Office of CISO. With a primary focus on the strategy and delivery of enterprise software supply chain security, Melba plays a pivotal role in safeguarding critical assets against emerging supply chain threats. In addition to her role at IBM, Melba is deeply involved in industry initiatives aimed at fortifying software supply chains. She serves as an OWASP Dependency Track maintainer, demonstrating her commitment to advancing open-source security solutions. Previously, she held leadership positions within the Open Source Security Foundation (OpenSSF), including co-lead of the Supply Chain Integrity Working Group and Lead of the Positioning Special Interest Group. Melba’s expertise spans over 18 years, covering a diverse range of domains such as application development, cloud computing, networking, and security. Her multidisciplinary background equips her with a comprehensive understanding of the intricate landscape of cybersecurity challenges. With a Master’s degree in Cybersecurity & Information Assurance, Melba is passionate about leveraging her knowledge and experience to drive impactful changes in the cybersecurity ecosystem.

Listed skills include Virtualization, Cloud Computing, Vmware, Integration, and 36 others.

Current workplace

Melba Lopez's current company

Company context helps verify the profile and gives searchers a useful next step.

IBM
Ibm
STSM - SW Supply Chain Security
Austin, TX, US
Website
Employees
332208
AeroLeads page
13 roles

Melba Lopez work experience

A career timeline built from the work history available for this profile.

Stsm - Sw Supply Chain Security

Ibm

Austin, Tx, Us

Sw Supply Chain Security Architect, Stsm

Current
Ibm

Armonk, New York, Ny, Us

• Responsible for the architecture and implementation of IBM’s Enterprise Software Supply Chain Security solution; working with executive, development, security, operations, product/consulting teams and business supporting stakeholders, further complying with NIST SSDF, C-SCRM, and White House Executive Order 14028• IBM Open Source Leader for Open SSF SLSA & Supply Chain Integrity WG, to create/enable a software supply chain security framework with various industry experts • Responsible for the security architecture and implementation for IBM Academy of Technology Humanitarian Emergency Aide List (H.E.A.L.) Project, which assists those affected by the war in Ukraine • Formerly technical leader of the IBM CISO’s E&TS Security Review Board

Aug 2021 - Present

Co-Founder

Current
Havana Banana Press L.L.C.
May 2021 - Present

Manager - Global Vulnerability Management

Palo Alto, Ca, Us

• Responsible for the growth and strategic direction of VMware’s vulnerability management program in the following focus areas: risk management, vulnerability lifecycle, domain & certificate management, bug bounty, public/private SaaS compliance, FedRAMP ConMon and POA&M, Merger & Acquisitions onboarding• Lead and developed team to adopt new operational processes to increase velocity and scale with growing SaaS offerings (JIRA, Confluence, Scrum/Kanban, automation)• Established Service Level Objectives (SLO) for FedRAMP and Commercial SaaS support• Successfully lead team to 475% YoY increase for audit readiness/support for commercial SaaS offerings through automation & process efficiencies resulting in multiple SOC, ISO, and PCI certifications• Expanded public-sector SaaS responsibilities resulting in 200% YoY increase for audit readiness/support • Coordinating development of customized health dashboards for KPI and Organizational health scores based on SLO/SLA • Weekly Risk & Remediation updates to CISO

Sep 2019 - Aug 2021

Senior Information Security Engineer

Palo Alto, Ca, Us

o Contributing to the strategic direction for vulnerability management and security testing capabilities at VMware.o Supporting compliance and risk management activities, recommending security controls and corrective actions to mitigate vulnerability risks.o Maintaining current knowledge and understanding of the threat landscape and emerging security threats and vulnerabilities.o Performing vulnerability assessments to identify weaknesses and countermeasures and providing timely assessment reports to key stakeholders.o Conducting attack surface reviews and recommending layered defenses to prevent exploits, detect and intercept attacks, and discover threat agents.o Performing complex security test data analysis in support of security vulnerability assessment processes, including root cause analysis.o Producing vulnerability, configuration, and coverage reporting to demonstrate assessment coverage and remediation effectiveness, designing and implementing dashboards and data visualizations for various stakeholders.o Implementing processes, capabilities, and techniques for vulnerability management and security testing.o Managing the end-to-end vulnerability life-cycle from discovery to closure.o Driving development and ongoing maintenance of vulnerability management platforms.o Monitoring vulnerability disclosure mailing lists and threat intelligence feeds to identify and triage new threats and vulnerabilities targeting VMware.o Serving as an escalation point on issues, dependencies, and risks related to vulnerability scanning and security testing.

Oct 2018 - Sep 2019

Senior Technical Account Manager, Professional Services Organization

Palo Alto, Ca, Us

- Consult with customers to enable VMware production adoption through education, architectural best practices, technical guidance, and troubleshooting- Assist customers’ adherence to internal security policies and compliance requirements within the VMware portfolio through VMware RBAC, hardening guidelines, STIG requirements, PCI requirements, or NIST recommendations- Proactively provide education and guidance to customers and internal TAMs around VMware security announcements and security best practices- Testing and proctoring the Networking & Security Hands on Lab for VMworld 2018

Feb 2016 - Oct 2018

Senior Consultant - Professional Services

Morrisville, Nc, Us

- WW Proof of Technology Leader & WW VMware vRealize/NSX Practice Leader- Provide architecture designs for Lenovo Reference Architectures as well as for customer’s business and technical requirements- Develop collateral for new service offerings and solutions- Identify, sell, and implement professional services for customers based on their future direction- Assist in cloud strategy & training for Enterprise Solution Services- Mentor new and existing employees in cloud, networking, and virtualization technologies.

Oct 2014 - Jan 2016

Senior I/T Specialist

Ibm

Armonk, New York, Ny, Us

Recommend and deploy virtualization and cloud solutions per customer’s business and technical requirementsIdentify and/or sell new professional services for customers based on their future directionImplement proof-of-concept solutions to enable customer feature requestsBuild long-term business relationships with various customers to ensure high level of customer satisfaction.Drive the adoption of new STG Technology and IBM Cloud Solutions by presenting at IBM technical conferences and training Business Partners worldwide. Develop documentation to enable integration, training, and support for new offerings and solutions.Mentor new and existing employees on cloud and virtualization technologies

Sep 2010 - Sep 2014

Technical Lead For Cloudburst & Esxi Solutions In Stg

Ibm

Armonk, New York, Ny, Us

Developed and implemented a new cloud solution offering called CloudBurst. Integration efforts also resulted in the development of a thorough CloudBurst Cookbook Integration document for CSC, Lab Services, and internal users as well as two published white papers for end customers.Provided technical direction and leadership in the development of CloudBurst offerings. Successfully lead the “CloudBurst” multi-functional and multi-organizational team to three releases of CloudBurst. Assumed additional responsibilities to fill in resource gaps including CloudBurst Solution Test Lead, Project Management of Integration/Test/Cookbook development, and Tivoli integration owner. Advised, trained, and provided ongoing technical support to lead and directly influence professional work teams outside my department or function such as, but not limited to, CSC, GTS, Tivoli, and various internal employees worldwide. Actively participated in defining and deciding upon objectives for future CloudBurst solutions. Made recommendations on design changes and improvements to redesign the CloudBurst offerings to incorporate the latest technologies that would drive efficiency and strengthen the customer user experience.Identified systems management requirements for ESXi and worked directly with VMware communicating the requirements. Lead team to successfully deliver multiple customized ESXi images and ESXi UXSPI package development. Lead testing efforts for customized ESXi image, USB certification tests, and other testing needs (such as upgrade, SOL, SNMP, etc) as they arose. Worked directly with VMware to resolve any technical issues found by development.

May 2009 - Sep 2010

Staff Sw Engineer In Stg Virtualization & Cloud Solutions Development

Ibm

Armonk, New York, Ny, Us

Develop virtualization and cloud solutions for various projects including, but not limited to, VMware, Xen, KVM, and Cloud Computing.Delivered multiple releases of VMware ESXi Embedded Hypervisor, Recovery, and Installable images.Provided ongoing technical guidance for VMware ESXi Embedded Solutions for Preload, Product Engineering, Manufacturing, and TSTL teams.Successfully defined, recommended, and/or implemented software alternatives and solutions to achieve a high level of efficiency and customer satisfaction for manufacturing and/or field issues as they arose. Enabled IBM Support team to handle ESXi related issues for Level 1 Support. Also provided direct technical support for ESXi customers worldwide. Implemented and proposed proof-of-concept cloud solutions to be competitive in the marketplace. Proposed these solutions to upper-line management, resulting in new solutions offerings provided by GTS.

Sep 2008 - May 2009

Staff Sw Engineer In Stg System X Preload & Custom Images

Ibm

Armonk, New York, Ny, Us

Designed, implemented, and delivered multiple releases of VMware Embedded Hypervisor preloadRedesigned the IBM preload process architecture to a more robust comprehensive solution that is 33-40% more efficient.Successfully, defined, recommended, and implemented VMware software alternatives and solutions to achieve a high level of efficiency and customer satisfaction for manufacturing and/or field issues as they arose. Lead a team to develop and deliver Reseller Option Kit (ROK) while making decisions on design changes and improvements incorporating the latest Microsoft technologies that would drive efficiency and strengthen the customer user experience.

Mar 2007 - Sep 2008

Software Design Engineer In Network Centric Systems

Arlington, Va, Us

Execution of all aspects of software development life-cycle related to various network/communications systems. This includes software design, code implementation, debug, integration, test, support and documentation.Implementation of various projects in a high order language on UNIX and/or Windows using modern software design methodologies. This includes specific technologies such as databases, distributed architectures, real time and/or embedded software, and system security-hardening, web-based technologies, and user interfaces/portals.Designing and improving current "Close STR Process" by utilizing Raytheon's Six Sigma Process. The new process will give an approximate raw ROI of 371%, thus saving approximately $69 K a year.

Jan 2006 - Feb 2007

Card Design Engineering Coop

Ibm

Armonk, New York, Ny, Us

Designed and implemented the architecture for a non-volatile memory card (NVRAM) that is designed for an IBM SCSI RAID storage card adapter with a removable data pack card. Delivered a set of Test Vehicles used for simulating connectors, and their use, in a real time environment. This required interpretation and implementation of high-level architectural documents.Assisted in the redesign of Blue Gene/L’s Clock Card by updating the spread spectrum function. Initiated and started work on future Blue Gene cards. Aided in the setup in the Blue Gene demo rack and demo cards.Interacted with various groups including Mechanical, Signal Integrity, Physical Design teams, vendors, and Contract Manufacturers to meet imminent deadlines.Assisted a team of experienced designers in circuit design, component selection, schematics entry, documentation in addition to Lab bring-up & debug activities for various projects with Microsoft, Adaptec, and IBM Server Cards.

May 2004 - Dec 2004
Team & coworkers

Colleagues at IBM

Other employees you can reach at ibm.com. View company contacts for 332208 employees →

3 education records

Melba Lopez education

Master Of Professional Studies In Information Sciences (Mps In Is), Cybersecurity And Information Assurance

Penn State University

Ccna Cyber Ops, Cybersecurity

Cisco Global Cybersecurity Scholarship Program (Cohort 7)

B.S., Electrical Engineering

University Of Florida
FAQ

Frequently asked questions about Melba Lopez

Quick answers generated from the profile data available on this page.

What company does Melba Lopez work for?

Melba Lopez works for IBM.

What is Melba Lopez's role at IBM?

Melba Lopez is listed as STSM - SW Supply Chain Security at IBM.

What is Melba Lopez's email address?

AeroLeads has found 1 work email signal at @ibm.com for Melba Lopez at IBM.

What is Melba Lopez's phone number?

AeroLeads has found 2 phone signal(s) with area code 305, 650 for Melba Lopez at IBM.

Where is Melba Lopez based?

Melba Lopez is based in Austin, Texas, United States while working with IBM.

What companies has Melba Lopez worked for?

Melba Lopez has worked for Ibm, Havana Banana Press L.L.C., Vmware, Lenovo, and Raytheon.

Who are Melba Lopez's colleagues at IBM?

Melba Lopez's colleagues at IBM include Frederik Sandvig Stage, Christian Calonge, Himika Gupta, Fernando Henrique Dos Santos, and Anna Faurholdt.

How can I contact Melba Lopez?

You can use AeroLeads to view verified contact signals for Melba Lopez at IBM, including work email, phone, and LinkedIn data when available.

What schools did Melba Lopez attend?

Melba Lopez holds Master Of Professional Studies In Information Sciences (Mps In Is), Cybersecurity And Information Assurance from Penn State University.

What skills is Melba Lopez known for?

Melba Lopez is listed with skills including Virtualization, Cloud Computing, Vmware, Integration, Storage, Testing, Solution Architecture, and Networking.

Find 750M verified contacts

Search by job title, company, industry, location, and seniority. Export verified B2B contact data when you need it.